Re: Computer Missing from AD
- From: "Dmitry Korolyov [MVP]" <d__k@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 29 Aug 2005 21:55:49 +0400
If you have more than one DC, machine could have logged on another DC
(though it would be very weird).
Well, now that you've checked group membership, I assume we should wait and
then look in the event log when/if any new computer account will be deleted.
Since there are no tracks from the past that we can use, I'm afraid this is
all we can do now.
--
Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
MVP: Windows Server - Directory Services
"Ben Dailey" <anonymous@xxxxxxxxxxx> wrote in message
news:OmJQrpIrFHA.3068@xxxxxxxxxxxxxxxxxxxxxxx
> Thanks for your response - in answer to your questions:
> 1) Not sure now as I have fixed these issues - something like 'domain
> controller could not be found'.
> 2) No
> 3) Yes
> 4) Have now
> 5) Have now
> 6) Done
>
> One interesting thing I noticed looking through the security log is that
> there is no past record of the machine ever logging on, even though the
> user had no trouble logging in.
>
> "Dmitry Korolyov [MVP]" <d__k@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:OjBraJArFHA.3836@xxxxxxxxxxxxxxxxxxxxxxx
>> 1) what error message do you see when you try to log in from any of these
>> two computers?
>> 2) are you able to find them through ADUC (using search) or not?
>> 3) Are you sure that these computer accounts have not been moved to some
>> other OU, instead of being deleted?
>> 4) Have you checked the membership of this domain's Domain Admins and
>> Administrators group, and forest root domain's Enterprise Admins group to
>> make sure they don't contain any accounts and groups they should not
>> contain?
>> 5) Have you checked the membership of other vital groups, such as Account
>> Operators?
>>
>> 6) I would recommend you to enable audit for deletion of computer
>> objects, and next time you will be able to get information about the
>> account that was used for the operation from the security event log on
>> the DC.
>>
>> --
>> Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
>> MVP: Windows Server - Directory Services
>>
>>
>> "Ben Dailey" <anonymous@xxxxxxxxxxx> wrote in message
>> news:OzW9uTqqFHA.3836@xxxxxxxxxxxxxxxxxxxxxxx
>>> Hi,
>>>
>>> I have the same problem described in the post by xor on 11 July 2005
>>> 'Missing Computers Object in AD'.
>>>
>>> I have had two computers disappear from the Active Directory in the last
>>> week. I am the only user with administrative rights over the domain and
>>> I know I have not removed them.
>>>
>>> When a user attempts logon at these machines (XP Pro SP2) they can't and
>>> further investigations have shown that their machines are no longer
>>> listed in the directory.
>>>
>>> There is nothing in the event log to indicate why this has happened.
>>>
>>> Does anyone have any ideas? Any help much appreciated.
>>>
>>> Cheers.
>>>
>>> Ben.
>>>
>>
>>
>
>
.
- References:
- Computer Missing from AD
- From: Ben Dailey
- Re: Computer Missing from AD
- From: Dmitry Korolyov [MVP]
- Re: Computer Missing from AD
- From: Ben Dailey
- Computer Missing from AD
- Prev by Date: Re: Domain Users Disjoining
- Next by Date: Re: DNS Problem
- Previous by thread: Re: Computer Missing from AD
- Next by thread: re: Applying Registry changes via GPO
- Index(es):
Relevant Pages
|